LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 12-27-2008, 05:23 PM   #1
DeepSeaNautilus
Member
 
Registered: Jul 2008
Posts: 65

Rep: Reputation: 15
Problem with atheros card in monitor mode


Hello. I want to use aircrack to crack my own wireless network (wpa-psk).
The problem I have is that when I put my atheros card in monitor mode, it does not capture any packets.

The output of the lspci command is:
Code:
04:01.0 Ethernet controller: Atheros Communications Inc. AR5212/AR5213 Multiprotocol MAC/baseband processor (rev 01)
My is card is an Airlink 101 superG with chipset awlh4130.
I downloaded madwifi tools using apt-get install and then aircrack from synaptics.
When I put my card back in managed mode, it detects my AP`s SSID, so in monitor mode it should at least detect it too. The output of iwconfig command in managed mode is:
Code:
ath0      IEEE 802.11g  ESSID:""  Nickname:""
          Mode:Monitor  Channel:0  Access Point: Not-Associated   
          Bit Rate:0 kb/s   Tx-Power:18 dBm   Sensitivity=1/1  
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=0/70  Signal level=-94 dBm  Noise level=-94 dBm
          Rx invalid nwid:5  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0
Any help will be greatly appreciated.

Last edited by DeepSeaNautilus; 12-28-2008 at 12:11 PM.
 
Old 12-27-2008, 06:05 PM   #2
alan_ri
Senior Member
 
Registered: Dec 2007
Location: Croatia
Distribution: Debian GNU/Linux
Posts: 1,733
Blog Entries: 5

Rep: Reputation: 127Reputation: 127
What distro do you use and what's the output of iwconfig ath0 mode monitor
 
Old 12-28-2008, 11:48 AM   #3
DeepSeaNautilus
Member
 
Registered: Jul 2008
Posts: 65

Original Poster
Rep: Reputation: 15
ubuntu

Quote:
Originally Posted by alan_ri View Post
What distro do you use and what's the output of iwconfig ath0 mode monitor
I am using ubuntu 8.04 with all the updates, using kernel version 2.6.24-22-generic. There is no output for that command.
 
Old 12-29-2008, 02:40 AM   #4
Junior Hacker
Senior Member
 
Registered: Jan 2005
Location: North America
Distribution: Debian testing Mandriva Ubuntu
Posts: 2,687

Rep: Reputation: 61
That command will only put the wireless interface in monitor mode, there will only be output if something is not working.
Although you did not mention, I hope you realize you'll only capture packets from a WPA secure AP when a computer connects wireless to that AP. Packets after the handshake mean nothing to airdump and won't be captured as the encrypted passphrase is only found in packets during the authorization handshake.
You need to deauth a wireless connected computer or try capturing while connecting wireless with another computer.
If I remember correctly, the encrypted passphrase will only be found in two packets.

Have you cruised the aircrack-ng forums to see what you all have to do? there are many tutorials there for different wireless devices.
 
Old 12-29-2008, 02:48 AM   #5
Junior Hacker
Senior Member
 
Registered: Jan 2005
Location: North America
Distribution: Debian testing Mandriva Ubuntu
Posts: 2,687

Rep: Reputation: 61
I was just looking at my notes, haven't played with this in over a year.
I usually have to bring the wireless interface up after changing it to monitor mode with command similar to: ifconfig ath0 up
 
Old 01-04-2009, 09:35 PM   #6
DeepSeaNautilus
Member
 
Registered: Jul 2008
Posts: 65

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by Junior Hacker View Post
I was just looking at my notes, haven't played with this in over a year.
I usually have to bring the wireless interface up after changing it to monitor mode with command similar to: ifconfig ath0 up
Thanks, even with ifconfig ath0 up it didnt work.
I had to download the linux headers and the essentials and then the madwifi driver. Then I compiled it. I was able to put my card in monitor mode this way with:
wlanconfig ath0 destroy
wlanconfig ath0 create wlandev wifi0 wlanmode monitor
ifconfig ath0 up

Then for monitoring:
airodump-ng ath0

But I have another problem, please look at my last thread if you want to help me.

Last edited by DeepSeaNautilus; 01-04-2009 at 09:37 PM.
 
Old 01-05-2009, 03:34 PM   #7
DeepSeaNautilus
Member
 
Registered: Jul 2008
Posts: 65

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by Junior Hacker View Post
Although you did not mention, I hope you realize you'll only capture packets from a WPA secure AP when a computer connects wireless to that AP. Packets after the handshake mean nothing to airdump and won't be captured as the encrypted passphrase is only found in packets during the authorization handshake.
You need to deauth a wireless connected computer or try capturing while connecting wireless with another computer.
If I remember correctly, the encrypted passphrase will only be found in two packets.

Have you cruised the aircrack-ng forums to see what you all have to do? there are many tutorials there for different wireless devices.
Yes, you are right. As you say, when trying to hack a wpa-psk network I have to deauth a wireless connected computer and then capture the handshake. Then I have to use a program to use brute force, because in wpa it doesnt matter how many ivs packets I capture because, unlike wep, wpa is not vulnerable to a statistical attack and can only be hacked using brute force ( as far as I know ).

I found a very good tutorial that shows how to a attack a wpa with mac filtering. But since Im learning I decided to change my wpa for wep, remove the mac filtering and then hack it ( I did that yesterday ). But now I have a problem. When I put my card in monitor mode, and then try to change the channel of an interface it doesnt change to the requested channel, but changes to a random channel. ( I could hack my own ap yesterday because I had good look and my ath0 changed randomly to the channel that I needed )

So when I try to use aireplay-ng to to associate my interface to the ap, it shows the following error:
the ap is in channel x but ath0 is in channel y.
when I use this command
iwconfig ath0 channel x
It changes to a random channel.

Im using the following commands:
Code:
ifconfig ath0 down
iwconfig ath0 channel x
ifconfig ath0 up
I also tried
Code:
wlanconfig ath0 destroy
wlanconfig ath0 create wlandev wifi0 wlanmode monitor
iwconfig ath0 channel x
ifconfig ath0 up
and:
Code:
wlanconfig ath0 destroy
airmon-ng start wifi0 x
ifconfig ath0 up
None of them worked, any ideas?
 
Old 01-06-2009, 10:39 AM   #8
DeepSeaNautilus
Member
 
Registered: Jul 2008
Posts: 65

Original Poster
Rep: Reputation: 15
Solved

Hello I found how to solve my problem. I just downloaded the linux headers and compiled the madwifi driver ( since the was I as using was the deafult driver that ubuntu has ). I did everything right and hacked my own network.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
iwconfig ath0 mode monitor - not working - atheros 5212 card Neil2008 Linux - Wireless Networking 1 10-26-2008 04:53 AM
how to put a network card into monitor mode? rabbit2345 Linux - Wireless Networking 3 05-11-2008 09:20 PM
Atheros WIFI card monitor mode Fusspils Linux - Wireless Networking 0 11-12-2007 04:10 AM
wireless card and monitor mode? billthecat Linux - Newbie 4 09-11-2007 04:11 PM
Setting Atheros Card into "monitor" state bigbadbo Linux - Wireless Networking 1 12-01-2006 08:16 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration